ModSecurity is a plugin for Apache web servers that acts as a web app layer firewall. It's used to prevent attacks towards script-driven Internet sites by using security rules that contain certain expressions. This way, the firewall can stop hacking and spamming attempts and protect even Internet sites which are not updated on a regular basis. For instance, a number of failed login attempts to a script admin area or attempts to execute a particular file with the objective to get access to the script shall trigger certain rules, so ModSecurity will stop these activities the instant it detects them. The firewall is incredibly efficient as it tracks the entire HTTP traffic to an Internet site in real time without slowing it down, so it could prevent an attack before any harm is done. It additionally maintains an exceptionally thorough log of all attack attempts which includes more information than standard Apache logs, so you can later analyze the data and take further measures to improve the security of your websites if needed.
ModSecurity in Shared Hosting
ModSecurity comes standard with all shared hosting solutions that we provide and it will be turned on automatically for any domain or subdomain that you add/create in your Hepsia hosting Control Panel. The firewall has three different modes, so you'll be able to activate and deactivate it with just a mouse click or set it to detection mode, so it will maintain a log of all attacks, but it shall not do anything to prevent them. The log for any of your websites shall contain detailed info such as the nature of the attack, where it came from, what action was taken by ModSecurity, etcetera. The firewall rules we use are regularly updated and include both commercial ones which we get from a third-party security business and custom ones that our system admins add in the event that they detect a new sort of attacks. That way, the sites you host here shall be much more secure without any action needed on your end.
ModSecurity in Semi-dedicated Hosting
Any web app that you install in your new semi-dedicated hosting account shall be protected by ModSecurity since the firewall is provided with all our hosting solutions and is turned on by default for any domain and subdomain that you add or create using your Hepsia hosting CP. You will be able to manage ModSecurity via a dedicated section inside Hepsia where not simply can you activate or deactivate it fully, but you can also activate a passive mode, so the firewall will not stop anything, but it shall still keep a record of possible attacks. This requires simply a mouse click and you'll be able to see the logs regardless if ModSecurity is in passive or active mode through the same section - what the attack was and where it came from, how it was taken care of, and so on. The firewall employs two groups of rules on our web servers - a commercial one that we get from a third-party web security company and a custom one that our admins update manually as to respond to recently discovered threats immediately.
ModSecurity in VPS Web Hosting
ModSecurity is provided with all Hepsia-based virtual private servers which we offer and it will be turned on automatically for every new domain or subdomain which you include on the machine. That way, any web application you install shall be protected right from the start without doing anything by hand on your end. The firewall can be managed from the section of the Control Panel which has the same name. This is the place whereyou'll be able to turn off ModSecurity or enable its passive mode, so it won't take any action towards threats, but shall still keep a detailed log. The recorded data is available inside the same area as well and you will be able to see what IPs any attacks originated from to enable you to block them, what the nature of the attempted attacks was and based on what security rules ModSecurity responded. The rules we use on our servers are a combination between commercial ones which we obtain from a security organization and custom ones which are included by our administrators to optimize the security of any web applications hosted on our end.
ModSecurity in Dedicated Servers Hosting
If you decide to host your websites on a dedicated server with the Hepsia CP, your web apps shall be protected straight away since ModSecurity is provided with all Hepsia-based packages. You shall be able to regulate the firewall with ease and if required, you will be able to turn it off or switch on its passive mode when it'll only keep a log of what is occurring without taking any action to stop potential attacks. The logs that you'll find in the exact same section of the CP are quite detailed and feature data about the attacker IP address, what site and file were attacked and in what ways, what rule the firewall used to stop the intrusion, and so on. This info shall permit you to take measures and improve the protection of your sites even more. To be on the safe side, we employ not only commercial rules, but also custom-made ones which our administrators add every time they recognize attacks which haven't yet been included within the commercial pack.